Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	RomeoWhiskey_Two	—	—
yara	RomeoWhiskey_One	—	—
yara	SierraAlfa	—	—
yara	SierraBravo_Two	—	—
yara	SierraBravo_One	—	—
yara	SierraBravo_packed	—	—
yara	SierraCharlie	—	—
yara	SierraJuliettMikeOne	—	—
yara	RomeoJuliettMikeTwo	—	—
yara	TangoAlfa	—	—
yara	TangoBravo	—	—
yara	UniformAlfa	—	—
yara	UniformJuliett	—	—
yara	WhiskeyAlfa	—	—
yara	WhiskeyBravo	—	—
yara	WhiskeyCharlie	—	—
yara	WhiskeyDelta	—	—
yara	SMB_Worm_Tool	—	—
yara	Lightweight_Backdoor1	—	—
yara	LightweightBackdoor2	—	—
yara	LightweightBackdoor3	—	—
yara	LightweightBackdoor4	—	—
yara	LightweightBackdoor5	—	—
yara	LightweightBackdoor6	—	—
yara	ProxyTool1	—	—
yara	DestructiveTargetCleaningTool2	—	—
yara	DestructiveTargetCleaningTool3	—	—
yara	DestructiveTargetCleaningTool4	—	—
yara	DestructiveTargetCleaningTool5	—	—
yara	DestructiveTargetCleaningTool6	—	—
yara	DestructiveTargetCleaningTool7	—	—
yara	DestructiveTargetCleaningTool8	—	—
yara	Malwareusedbycyberthreatactor1	—	—
yara	Malwareusedbycyberthreatactor2	—	—
yara	Malwareusedbycyberthreatactor3	—	—
yara	wiper_unique_strings	—	—
yara	wiper_encoded_strings	—	—
yara	createP2P	—	—
yara	firewallOpener	—	—
yara	Caracachs	—	—